6854eac80e
Resolves 8 open Dependabot alerts in web/pnpm-lock.yaml (all dev-only transitive dependencies) by pinning patched versions through the existing pnpm.overrides mechanism: - undici 7.24.7 -> 7.28.0 (via jsdom; alerts #43-#49, incl. 2 high: TLS cert validation bypass & cross-origin routing via SOCKS5 ProxyAgent) - js-yaml 4.1.1 -> 4.2.0 (via @eslint/eslintrc; alert #39, quadratic DoS) - @babel/core 7.29.0 -> 7.29.6 (via @vitejs/plugin-react; alert #38, arbitrary file read via sourceMappingURL) No vulnerable versions remain in the lockfile. Web build and lint pass; the only failing tests (ServerStorageStep ResizeObserver) are pre-existing on main and unrelated to these bumps. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
89 lines
2.6 KiB
JSON
89 lines
2.6 KiB
JSON
{
|
|
"name": "silo-web",
|
|
"private": true,
|
|
"version": "0.0.1",
|
|
"license": "AGPL-3.0-or-later",
|
|
"packageManager": "pnpm@10.32.1",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"test": "vitest run",
|
|
"build": "tsc -b && vite build",
|
|
"preview": "vite preview",
|
|
"lint": "eslint .",
|
|
"lint:fix": "eslint . --fix",
|
|
"format": "prettier --write \"src/**/*.{ts,tsx,css}\"",
|
|
"format:check": "prettier --check \"src/**/*.{ts,tsx,css}\""
|
|
},
|
|
"dependencies": {
|
|
"@dnd-kit/core": "^6.3.1",
|
|
"@dnd-kit/sortable": "^10.0.0",
|
|
"@dnd-kit/utilities": "^3.2.2",
|
|
"@fontsource/noto-sans-arabic": "^5.2.10",
|
|
"@fontsource/noto-sans-thai": "^5.2.8",
|
|
"@tanstack/react-query": "^5.90.21",
|
|
"@tanstack/react-virtual": "^3.13.19",
|
|
"@zip.js/zip.js": "^2.8.26",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"embla-carousel": "^8.6.0",
|
|
"embla-carousel-react": "^8.6.0",
|
|
"embla-carousel-wheel-gestures": "^8.1.0",
|
|
"foliate-js": "file:vendor/foliate-js",
|
|
"framer-motion": "^12.38.0",
|
|
"hls.js": "^1.6.15",
|
|
"jassub": "^2.4.2",
|
|
"libpgs": "^0.8.1",
|
|
"lucide-react": "^0.576.0",
|
|
"node-unrar-js": "^2.0.2",
|
|
"pdfjs-dist": "^5.7.284",
|
|
"radix-ui": "^1.4.3",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"react-qr-code": "^2.0.18",
|
|
"react-router": "^7.15.1",
|
|
"sonner": "^2.0.7",
|
|
"tailwind-merge": "^3.5.0",
|
|
"thumbhash": "^0.1.1"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.39.4",
|
|
"@tailwindcss/vite": "^4.0.0",
|
|
"@testing-library/jest-dom": "^6.9.1",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@testing-library/user-event": "^14.6.1",
|
|
"@types/node": "^25.3.3",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@vitejs/plugin-react": "^4.4.0",
|
|
"eslint": "^9.39.4",
|
|
"eslint-config-prettier": "^10.1.8",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"eslint-plugin-react-refresh": "^0.5.2",
|
|
"jsdom": "^29.0.1",
|
|
"prettier": "^3.8.1",
|
|
"prettier-plugin-tailwindcss": "^0.6.14",
|
|
"tailwindcss": "^4.0.0",
|
|
"typescript": "^5.7.0",
|
|
"typescript-eslint": "^8.57.0",
|
|
"vite": "^6.4.3",
|
|
"vitest": "^4.1.0"
|
|
},
|
|
"pnpm": {
|
|
"onlyBuiltDependencies": [
|
|
"esbuild"
|
|
],
|
|
"overrides": {
|
|
"@babel/core@<7.29.6": "7.29.6",
|
|
"brace-expansion@<1.1.13": "1.1.13",
|
|
"brace-expansion@>=4.0.0 <5.0.6": "5.0.6",
|
|
"flatted@<=3.4.1": "3.4.2",
|
|
"js-yaml@<4.2.0": "4.2.0",
|
|
"picomatch@>=4.0.0 <4.0.4": "4.0.4",
|
|
"postcss@<8.5.10": "8.5.10",
|
|
"undici@<7.28.0": "7.28.0",
|
|
"vite@>=6.0.0 <6.4.2": "6.4.2"
|
|
}
|
|
}
|
|
}
|